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MEMORANDUM FOR: 
FROM: 


SUBJECT : 


Deputy Director for Administration 

James H. McDonald 
Director of Logistics 

Contractual and Industrial Security Oversight 


Don : 

Jack Blake^directed^the 

an in-depth review of industrial contracting and m u . 

security in CIA. That group was chaired by | Procure- h 

recommendations taking place c vpar There is attached 

ITlYAlrit »X! V ‘vSu «u»« 

iargest number note that of 51 approved 

process. These recommendations became the b asis 

current 1 G investigation bein g conducted by | t ct°as 

of .proved _r,c«X »ti.»» 
remained to be completed, most Itsng term. 


25X1 

25X1 


25X1 

25X1 


OL 9 1669 


Downgrade to AIUO 
when separate from 
attachment 


\ ;.-u '1 . » ; 
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SUBJECT: Contractual and Industrial Security Oversight 


2. I would be happy to meet with you at your convenience 
to discuss any or all o£ the recommendations as well as action 
taken t o date to implement said recommendations, Mr. Charles 

in OS has asked that he also be included in any briefing 
to you on task force recommendations and subsequent implementa- 
tion action. I I 


25X1 


James H. McDonald 


Attachment 


25X1 


Distribution : 

1 each PN recipient 
1 - OL Official P 
1 - D/L Chrono J 
1 - OL/PMS Sub j e<y 
1 - OL/PMS Chron/ 
OL/PMS: 


'25 Apr 79 
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CONTRACTUAL AND INDUSTRIAL SECURITY OVERSIGHT 


RECOMMENDATION OR DIRECTION 

Industrial Security Interim ReDort 

APPROVAL 

STATUS 

ACTION 

ASSIGNED 

Recommendation fl: That remerHpo 

EAG 

A/18/78 

OGC 

able in contract law be used as the primary 
means of enforcing contractor compliance 
with industrial security standards. 

DDCI 

6/2/78 

Recommendation #2: That the Avenrv 

EAG 

4/18/78 

OGC/OLC 

explore legislation which would empower 
the DCI to impose sanctions on industrial 
security contractors who fail to conform 
to security performance standards. 

DDCI 

6/2/78 


NECESSARY FOR 
IMPLEMENTATION 


TARGET COM- 
PLETION DATE 


Recommendation #3: That Direetn,--„f 
Security responsibilities for the 

Agency industrial security effort be 
clearly defined in the Office of 

Security series of Agency regulations. 

EAG 

DDCI 

4/18/78 

6/2/78 

D/Sec 

Recommendation #4: That Aeenrv 
tions be revised to clearly charge the 
Director of Communications with responsi- 
bility for and enforcement of communica- 
tions security at Agency-sponsored 
contractor facilities, including those 
of National Programs. 

EAG 

DDCI 

4/18/78 

6/2/78 

D/CO 


COMMENT/ 

STATUS RECOMMENDATION 

Complete 


On 11 Jan 79, Brian Walsh, staff 
member for the Subcommittee on 
Federal Spending Practices and Open 
Government, stated unequivocally 
that any legislative punitive sanc- 
tions against contractors violating 
industrial contract security provi- 
sions would not be considered 
further. No punitive provisions 
will be included in acquisition 
legislation. 

Complete 


Complete 


NOTICE 

INTELLIGENCE SOURCES 
AND METHODS '.EVOLVED 


25X1! 

1 ! 


ccnngt 
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RECOMMENDATION OR DTRFrTTnn 

APPROVAL 

STATUS 

ACTION NECESSARY FOR 

ASSIGNED TO IMPLEMENTATION 

TARGET COM- 
PLETION DATE STATUS 

COMMENT/ 

RECOMMENDATION 

! 

Industrial Security Interim Report 







Recommendation #5: That Aeencv reeula- 
tions be strengthened to give the Director 

EAG 

DDCI . 

4/18/78 

6/2/78 

D/Sec 

Complete 


! ; 

• i 


of Security clear responsibility for the 
overall coordination of the entire indus- 
trial security effort of the Agency and 
for ensuring that classified procurement 
security support is well organized and 
effective. These regulations should 
include provision for: 

—Security audits of procurement 
security management practices within 
Agency components as well as security 
audits of contractor facilities; 

— Technical supervision of all 
industrial security officers includ- ' 
ing establishment of comprehensive 
reporting requirements; and 

— Implementation of an Industrial 
Counterintelligence Program, includ- 
ing the scheduling of audio 
countermeasures inspections of con- 
tractor facilities and the estab- 
lishment of a close working liaison 
with the FBI with respect to 
industrial security. ' 

Recommendation 86 : That the Director EAG 4/18/78 D/Sec 

of Security be required to prepare a DDCI 6/2/78 Complete 

written review of the fitness reports of 
all Industrial security officers as to 
their performance in carrying out his 
security policy. 




recommendation or direction 

Indust rial Security Interim Report 

Recommendation Si: That the Director 
of Security develop a centralized index 
of the industrial security status of 
contractor personnel and facilities to 
improve security oversight. 

Recommendation II 8 : That the Inspector 
General perform functional reviews of 
the Agency Industrial Security Program. 


ACTION 
ASSIGNED TO 


NECESSARY FOR 
IMPLEMENTATION 


TARGET COM- 
PLETION DATE 



4/18/78 D/SEC 
6/2/78 


4/18/78 IG 
6/2/78 


4/18/78 D/CO 
6/2/78 


COMMENT/ 

RECOMMENDATION 


Conversion of the industrial 
security approvals of contractor 
personnel into an automated system 
(SECOND Program) has commenced. 

It is estimated that this effort 
will be complete by Fall 1979. 





recommendation or direction approva 

Industrial Security Interim Report 

Recommendation ft 10 : That the Director EAG 

of Security be responsible for monitoring DDCI 
the security responsibilities of the 
contractor. The enforcement of contract 
terms, including those covering security' 
performance, remain the responsibility 
of the contracting officer. 

Recommendation #11 : That procedures be EAG 

revised to provide for a single industrial DDCI 
security officer to be responsible for 
inspection and policy guidance at each 
contractor facility wherever cover and 
operational security permit. 

_Recommendation 012 : That the necessary EAG 
staff realignment and augmentation be DDCI 

approved and that added contractor costs 
be absorbed by the sponsoring office. 

Recommendation #13 : That a uniform EAG 

industrial security manual (currently DDCI 

in preparation) be completed at the 
earliest possible date and that the 
performance standards contained therein 
with appropriate annexes be incorporated 
in the provisions of classified Agency 
contracts. Community-wide coordination 
and acceptance of the uniform manual . 
should be encouraged. 


ACTION ' 
ASSIGNED TO 


NECESSARY FOR 
IMPLEMENTATION 


TARGET COM- 
PLETION PATE 


COMMENT/ 

RECOMMENDATION 


Manual in process 
of being printed. 
Should be ready for 
distribution late 
April/early May. 


secret 


RECOMMENDATION OR DIRECTION 



ACTION NECESSARY FOR 

TARGET COM- 

COMMENT/ 

APPROVAL 

STATUS 

ASSIGNED TO IMPLEMENTATION 

PLETION DATE STATUS 

RECOMMENDATION 

l 

Industrial Security Interim Report 






Recommendation #14: That the Director 

EAG 

4/18/78 

D/SEC 

Complete 

Conflicts resulting ' 

of Security periodically review variances 

DDCI 

6/2/78 


from such variances ; 

and waivers recommended by industrial 





will be referred to 

security officers to ensure compliance 





the Director of Security ; 

with Agency security policy. 





(Attn: DD/PTOS) for ; 

resolution. j 

Recommendation #15: That "reauests for 

EAG 

4/18/78 

D/L 

Complete 


proposals" which anticipate classified 

DDCI 

6/2/78 


contracts describe security requirements 
and require that the contractor Include 






in his proposal his plan for satisfying 
those requirements. 

* 




i 

Recommendation #16: That contractor 

EAG 

4/18/78 

D/L 

Complete 

1 

performance in the security area be 

DDCI 

6/2/78 




considered as a critical element for 
consideration in the contracting 
officer's determination of responsibility 
prior to awarding contracts. 


Recommendation #17: That incentive/ 
award fee type contracts include 
security performance along with other 
performance requirements as a basis for 
fee determination. 

EAG 

DDCI 

4/18/78 

6/2/78 

D/L 

Complete 

' 

' 

Recommendation #18: That classified 

EAG 

4/18/78 

D/SEC 

Complete 

contracts shall incorporate specific 

DDCI 

6/2/78 

OGC 


security performance standards as well 
as language that stresses the impor- 
tance of complying with all security 
requirements . 


SE00EI 


RECOMMENDATION OR DIRECTION i 

Indugtrial Security Final Report 

Recommendation #1 ; That there be one I 
delegation of contracting authority 
. front the DCI to the D/Log with redelega- 
tion of that authority to the contracting 
officers for National and CIA Programs. 

Recommendation #2 : That decentralized 
contracting procedures be continued as 
the most cost effective method of 
carrying out industrial R&D contracting. 

Recommendation #3 (ISIR #4): That 
Agency regulations be revised to charge 
the D/Sec with specific responsibility 
for the physical security protection 
of communications centers located at 
Agency-sponsored contractor facilities, 
including those of National Programs, 
and also be revised to charge the D/CO 
with specific responsibility for emanations, 
transmission and cryptographic security 
protection at these facilities. 

Recommendation U (ISIR #6): That the 
D/Sec participate jointly with Agency 
procurement components in preparing 
Letters of Instruction (LOIs) for each 
ISO and to prepare, as part of the 
fitness report cycle, a written evalua- 
tion of his or her performance in 
carrying out security policy. The 
D/Sec’s evaluation will be shown to 
the Office of Personnel (OP) for inclu- 
sion in the officer's official personnel 
file. 


ACTION NECESSARY FOR 

ASSIGNED TO IMPLEMENTATION 


Disapproved 

EAG 

DDCI 


No determination. 
Recommendation requested 
by DDCI. 


TARGET COM- COMMENT/ 

PLETION DATE STATOS RECOMMENDATION 


N/A Disapproved. No 
action necessary. 


4/18/78 None 

6/2/78 


approval 


STATUS 


RECOMMENDATION OR DIRECTION 
Industrial S ecurity Final Rpnnrr 

Recommendation it 5 (ISIR #5): That 
Agency regulations include provision 
for the D/Sec to exercise functional 
supervision over all ISOs and to set 
up comprehensive reporting require- 
ments which will include a direct 
channel of communication between 
each ISO and the OS. 

Recommendation #6 : That the D/Sec 
examine the ISO support structure in 
order to recommend to the contracting 
components effective functional 
realignment and reporting responsi- 
bilities. Emphasis should be placed 
on a more efficient structuring of 
the industrial sponi-t i-y staffing on 


Recommendation #7 : That the Office 
of Legislative Counsel in coordination 
with the Office of General Counsel 
advise the DCI of legislative proposals 
which could severely impact on the 
procurement authorities of Section 8 
of the CIA Act. 


SECBET 

ACTION NECESSARY FOR 

ASSIGNED TO IMPLEMENTATION 


BAG 4/18/78 None 

DDCI 6/2/78 


EAG 4/18/78 None 

DDCI 6/2/78 


No determination. 
Recommendation requested 
by DDCI. 


TARGET COM- COMMENT/ 

PLETION DATE STATUS RECOMMENDATION 


Complete 


Complete 


Complete 



i 
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k 

i 
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ACTION NECESSARY FOR TARGET COM- COMMENT/ 


RECOMMENDATION OR DIRECTION APPROVAL STATUS ASSIGNED TO IMPLEMENTATION PLETION DATE STATUS RECOMMENDATION 



Industrial Security Final Report 





Recommendation #8: That CIA continue 
to utilize the ASPR to the maximum prac- 
tical extent except in those areas in 
which the FPR is mandatory for all 

Federal agencies. 

No determination 


Complete j 

f 

! 

| 

[ 


Recommendation #9 : That the D/Log 
continue to issue notices on procure- 
ment policy and procedures which 
complement the ASPR and FPR and permit 
sufficient flexibility for procurement 
responsiveness to mission requirements. 

No determination 


Complete j 

• j 

{ 

( 

I 


Recommendation #10: That the Agency 
continue to implement interagency 
agreements for the development of 
national collection programs. 

No determination. 

Recommendation requested 
by DDCI. 


Complete j 

1 

i 


Recommendation #11: That the D/L 
issue procurement policy and procedural 
guidance for both Agency and National 
Programs and oversee their implementa- 
tion. 

No determination 


Complete | 

/ i 
! 

! 


Recommendation #12: That the Prolect 
officer's Manual be undated end 
as a Headquarters handbook to provide 
guidance for technical representatives 
involved in. the industrial contracting 
process. Particular attention should 
be given to guidance on Industrial 
security matters. 

No determination. 

Recommendation requested by DDCI. 

August 1979 

Adopted as an MBO for Logistics ; 

in 1979. The primary manual will ! 

go into typing during the week of j 

28 May. Several addenda are still j 

in writing stage. j 

i 

■ 1 

1 


/ 

8 
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i 
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RECOMMENDATION or direction 
I ndustrial Security Final Report: 

Recommendation £13: That the Project 
Offi cer in the Contract Cycle course be 
continued with emphasis on the specific 
role of the contracting officer, the 
auditor, the security officer, and the 
technical representative with respect 
to industrial security. 


APPROVAL statps 


ACTION NECESSARY FOR 

ASSIGNED TO IMPLEMENTATION 


No determination. 
Recommendation requested 
by DDCI. 


Recommendation #14 : That the D/Log, 
in coordination with the Deputy Director 
for Science and Technology (DDS&T) , estab- 
lish contract review procedures which 
Will ensure adherence to Agency procure- 
ment policy consistent with National 
Programs requirements . 


No determination. 


TARGET COM- COMMENT/ 

PLETION DATE STATUS RECOMMENDATION 


Complete 


Complete 


I 

} 

i 

i 


Recommendation tflS: That the Inspector 
General conduct periodic functional 
audits and inspections of the indus- 
trial contracting process. 


No determination. 
Recommendation requested 
by DDCI. 


Complete ( 

I 


Recommendation tf!6: That the Director 
of Finance and the Chief, Det A, jointly 
conduct periodic reviews of the policies 
and procedures followed by each of their 
components for the purpose of assuring 
appropriate application of contract 
audit policy and procedures. 


No determination. 
Recommendation requested 
by DDCI. 


Complete 






recommendation or direction APPROVAL STAID 

Industrial Security Final Report 
Recommendation 017 : That the Inspector No determination. 


ACTION 
ASSIGNED TO 


NECESSARY FOR 
IMPLEMENTATION 


TARGET COM- 
PLETION DATE 


COMMENT/ 

RECOMMENDATION 


General arrange with representatives. of 
the DCAA to conduct a joint survey to 
determine what action is required to 
improve audit services provided to 
Agency-managed National Programs. 

Recommendation 018 : That the General 
Counsel and the D/Log determine what 
further manpower may be necessary to 
enable the division to provide the 
desired legal support to the industrial 
contracting process while fulfilling its 
other assigned responsibilities. 

Recommendation //19 : That the D/Log 
consider the establishment of a Deputy 
Director for Industrial Contracting. 

Recommendation It 20 : The the D/Log. 
review the Procurement Management 
Staff to assure that it is staffed to 
carry its responsibilities. 

Recommendation 021: That the n/T.no 
reduce | | 

activities by redirecting competitive 
industrial R&D contracting responsi- 
bilities to the component contracting 
teams. 

Recommendation 1122 : That the 
Inspector General determine if the 
functional review of industrial 

contracting requires additional 

personnel. “““ " 


Recommendation requested 
by DDCI. 


No determination. 
Recommendation requested 


No determination. 

Recommendation requested by DDCI. 


No determination. 

Recommendation requested by DDCI. 


No determination. - 
Recommendation requested by DDCI. 


No determination. . 

Recommendation requested by DDCI. 


2 April. 79 


No additional? 
power requirJq 


Approval not recommended. 


One additional GS-15 
position will be added 
to OL/PMS. 


Procurement Note to be 
issued week of 23 May. 
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RECOMMENDATION OR DIRECTION 

Industrial Security Final Reoort 

ACTION 

APPROVAL STATUS ASSIGNED TO 

NECESSARY FOR 
IMPLEMENTATION 

TARGET COM- 
PLETION DATE 

STATUS 

COMMENT/ j 

RECOMMENDATION i. 

| 

Recommendation 1123: That the DDA 
establish a working group to develop 
procedures for implementing ISIR 
Recommendations #15, 16, 17 , and 18, 
and report to the DDA within 60 days. 

No determination. 

Recommendation requested 
by DDCI. . 



Complete 

i 

Disapproval recommended. I 
15, 16, 17, and 18 I 
approved and moving 1 
toward implementation. j 

Recommendation #24: Thar rh, n/T« c 
(for contracting officers) and D/Fin 
(for auditors) participate jointly 
with Agency procurement components 
in preparing Letters of Instruction. 

The D/L and the D/Fin shall also 
prepare written evaluations of their 

No determination. 

Recommendation requested 
by DDCI. 


April 1979 


Action complete for COs [ 

except for receipt of LOIa ; 

! 

i 

i 


personnel assigned to Industrial 
Contracting Teams to ensure assess- 
ment of their technical performance. 

These evaluations shall be shown to ' 
the individuals concerned, attached 
to their fitness reports, and 
included In their official personnel 

files. i 

I 


Recommendation #25; That a compart- Conditional approval 

mented contract management system be EAG . 5/23/78 See discussion on last 

developed which will include the DDCI 6/2/78 item of this report, 

requirements of the users of CONIF, 

STEPS and SPA, and that the D/Log 
establish procedures for utilizing 
this system to monitor the performance 




SEGttT 


y 





-RECOMMENDATION OR DIRECTION 

b. The DDS&T shall establish a National 
Programs Contract Review Board to review 
system procurements and associated source 
selection procedures. The Board shall be 
chaired by the Associate Deputy Director for 
Science and Technology and have the follow- 
ing membership: The Director of Logistics 
or in his absence a representative appointed 
by him; a Senior Program Manager appointed 
by the DDS&T; a Legal Advisor appointed by 
the General Counsel; the Comptroller, DDS&T 
as a representative of Director of Finance;’ 
and a Security Advisor appointed by the 
Director of Security. The Chief, Procurement 
Management Staff, DDS&T, and a representative 
of Detachment A DCAA will act as advisors to 
the Board. The Board at its initial meeting 
shall recommend to the DDS&T its procedures, 
types of procurements, and criteria for 
procurements that will be subject to its 
review and approval. A copy of these procedures 
will be submitted for my approval. 


APPROVAL STATUS 

Approved 

EAG 5/23/78 

DDCI . . 6/2/78 


c. The DDS&T shall revise and update the Approved 
current delegations of contracting authority EAG 5/23/78 

for National Programs from the DCI to the DDCI 6/2/78 

Chief, Contract Staff, OD&E, to include the 
following provisions: 


(1) The National Programs Contracting 
Officer has direct access to the Director of 
Logistics for coordinating substantive matters 
and shall bring to his attention any problem 
that could result in embarrassment or legal 
difficulty for the Agency. 


ACTION 
ASSIGNED TO 

DDS&T 


DDS&T 


NECESSARY FOR 
IMPLEMENTATION 


TARGET COM- COMMENT/ 

PLETION DATE STATUS RECOMMENDATION 

Complete charter established. 

Documentation re- ; 

quirements set and 
projection of case ' 

loading determined. 

| 


Complete 
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recommendation or direction 

(2) The National Programs Contracting 
Officer shall establish review procedures 
which will ensure adherence to Agency 
procurement policy consistent with 
National Programs requirements. Any policy 
differences, which cannot be reconciled, 
shall be submitted to me with a request, 
accompanied by justification, for policy 
exception. 

d. The Director of Logistics shall 
ensure that the Procurement Management 

Staff, OL, makes periodic inspections of 
the OD&E Contract Staff. 

e. The DDS&T shall provide that the 
Director of Logistics or his designee, 

Chief, Procurement Management Staff, OL 
is the reviewing official on fitness 
reports for the Chief, Procurement Manage- 
ment Staff, DDS&T, and for the Chief, 

Contracts Staff, OD&E. 

f. Concerning Recommendation 025, 
the DDA and DDS&T will work together to 
establish an appropriate data base to 
ensure that essential contract informa- 
tion is readily available for responding 
to questions on Agency contracting 
activity. 


ACTION 
ASSIGNED TO 


NECESSARY FOR 
IMPLEMENTATION 


TARGET COM- 
PLETION DATE 


Include National 
Teams on inspec- 
tion schedule. 


As FRs are 

written 


COMMENT/ 

RECOMMENDATION 


Agreement has been 
reached and teams are 
progressively being 
scheduled for inspec- 
tions . 

D/L or designee will 


Agreement has been 
reached between 
..Logistics and DDS&T 
on monitoring data j 

from SPA. Necessary ' 

program changes are ! 

currently being defined. ! 


